I built and am running a mail server, using dovecot for IMAP4 server and Power DNS (pdns) for DNS authoritative server, and memcached for back-end service for some mail filter.
I also use LXC for staging environment to test my mail server, but running those services is not straight forward.
My understanding is that it is because some security features of systemd using Linux kernel namespace function conflict with the use of namespace in LXC container.
So, if you want to run memcached, dovecot, and pdns via systemd within LXC container, you have to disable some security features of systemd by configuration.
My additional configuration to systemd is as follows:
root@myhost:/# cat /etc/systemd/system/memcached.service.d/99-ns.conf
[Service]
ProtectSystem = no
ProtectHome = no
PrivateDevices = no
PrivateTmp = no
cat /etc/systemd/system/dovecot.service.d/99-ns.conf
[Service]
ProtectSystem = no
PrivateDevices = no
PrivateTmp = no
root@myhost:/# grep -v '#' /etc/systemd/system/pdns.service.d/99-ns.conf
[Service]
ProtectSystem = no
ProtectHome = no
PrivateDevices = no
PrivateTmp = no
ProtectControlGroups=false
ProtectKernelLogs=false
ProtectKernelModules=false
ProtectKernelTunables=false
When I'm home, I use fiber-optic line with a dedicated old small router (YAMAHA RT107e) for access to the Internet. But I recently became anxious about the router. If it fails, how can I survive until I get another one? So, I tried to connect my Debian desktop PC to the fiber-optic line without the router. The PC have to talk to the other side of the line with PPPoE but I did not know how. In my PC, the Network Manager manages network configuration. So, I had to configure the Network Manager to utilize the pppoe like : nmcli connection add ifname eth0 connection.type pppoe username USERNAME password PASSWORD
Comments
Post a Comment